exploitDog

CVE-2013-6143

Опубликовано: 31 янв. 2014

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3_P4 and C3413-500-001F0_PB allows remote attackers to cause a denial of service (temporary outage and CPU consumption) via malformed DNP3 traffic.

Комментарий

Vendor advisory: https://infrastructurecommunity.schneider-electric.com/servlet/JiveServlet/downloadBody/2966-102-1-4299/SAGE%20RTU%20DNP%20Security%20Bulletin%20123013%200102.pdf

Ссылки

http://ics-cert.us-cert.gov/advisories/ICSA-14-006-01
US Government Resource
http://ics-cert.us-cert.gov/advisories/ICSA-14-006-01
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:schneider-electric:telvent_sage_3030_firmware:c3413-500-001d3_p4:*:*:*:*:*:*:*

cpe:2.3:o:schneider-electric:telvent_sage_3030_firmware:c3413-500-001f0_pb:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00455

Низкий

5 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

GHSA-9g3h-w5f5-vg3j

github

больше 3 лет назад

The Schneider Electric Telvent SAGE 3030 RTU with firmware C3413-500-001D3_P4 and C3413-500-001F0_PB allows remote attackers to cause a denial of service (temporary outage and CPU consumption) via malformed DNP3 traffic.

EPSS

Процентиль: 63%

0.00455

Низкий

5 Medium

CVSS2

Дефекты

CWE-20